Hi all!
I have a search like this:
search * | timechart span=1d count as foo
I need to pass all the values of that timechart to an HTML child module, in order to print something like this:
[37, 56, 29, 8, 33, 74, 61, 19, 23, 48, 17, 30, 87, 30, 6, 19, 23, 31, 55, 55, 41, 65, 87]
how can I get this result?
I can pass a single value to the child module using $results[0].foo$, but I want all the values of the series!
So far I do this:
search * | timechart span=1d count as foo | stats list(foo) as seriesfinale
so I can retrieve all the series' values with
$results[0].seriesfinale$
So far I do this:
search * | timechart span=1d count as foo | stats list(foo) as seriesfinale
so I can retrieve all the series' values with
$results[0].seriesfinale$